Senior Cybersecurity Analyst – Incident Response & Threat Hunting

EXOS; Indianapolis (IN); On-site; USD 120,000 - 160,000; Full time

Job summary

EXOS CYBER is seeking a Cybersecurity Analyst III to serve as the senior escalation point for the SOC, owning confirmed incidents end-to-end across client environments. You will lead advanced detection, incident response, and threat hunting, collaborating with engineers on detection strategy and program-level improvements.

You will mentor Tier 1/2, develop investigations curricula, and drive quality across investigations with evidence-backed recommendations and client communication.

Qualifications

• 5+ years in a SOC or 2+ years past Tier 2 in a comparable environment.

Responsibilities

• Serve as the Tier 3 technical escalation point in the SOC and drive incidents to a definitive answer.
• Lead end-to-end incidents across client environments including ransomware, BEC, account takeover, lateral movement and exfiltration.
• Own proactive threat hunting program with hypothesis-driven hunts and feed detections back to engineering.
• Perform host, memory, and network forensics to establish what happened and support breach-notification.
• Conduct phishing triage and support email-based threat investigations.
• Partner on detection strategy at program level and map coverage to MITRE ATT&CK.
• Apply adversary-emulation knowledge to inform detection coverage and purple-team activities.
• Analyze telemetry to identify suspicious activity and lead investigations with remediation steps.
• Set and enforce investigation quality standards and mentor Tier 1/2 teams.
• Author analytical narratives for complex client deliverables and post-incident reports.
• Shape runbooks, playbooks, and repeatable workflows to mature SOC operations.

Skills

SOC experience

IR leadership

EDR proficiency

SIEM proficiency

Forensics experience

Threat hunting

PowerShell

Python scripting

MITRE ATT&CK

IR lifecycle

Documentation

TCP/IP basics

Identity management

Team mentorship

Multi-client leadership

Education

Bachelor's degree in Cybersecurity

GIAC GCIA/GCFA/GCFE

OSCP

CompTIA CySA+

Tools

SentinelOne

CrowdStrike

Defender for Endpoint

Blumira

Splunk

QRadar

Entra ID

Velociraptor

Job description

EXOS CYBER is seeking a Cybersecurity Analyst III to serve as the senior escalation point for the SOC, owning confirmed incidents end-to-end across client environments. You will lead advanced detection, incident response, and threat hunting, collaborating with engineers on detection strategy and program-level improvements.

You will mentor Tier 1/2, develop investigations curricula, and drive quality across investigations with evidence-backed recommendations and client communication.